GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
631 advisories
Filter by severity
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3...
Moderate
Unreviewed
CVE-2023-47745
was published
Mar 3, 2024
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information...
Critical
Unreviewed
CVE-2023-39245
was published
Feb 15, 2024
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3...
Moderate
Unreviewed
CVE-2023-42016
was published
Feb 9, 2024
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances...
High
Unreviewed
CVE-2023-32328
was published
Feb 7, 2024
An attacker with access to the network where the affected devices are located could...
Moderate
Unreviewed
CVE-2023-40544
was published
Feb 7, 2024
Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which...
Moderate
Unreviewed
CVE-2008-4122
was published
May 2, 2022
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the...
High
Unreviewed
CVE-2008-0374
was published
May 1, 2022
EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified...
Moderate
Unreviewed
CVE-2008-3289
was published
May 1, 2022
The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext...
High
Unreviewed
CVE-2008-4390
was published
May 2, 2022
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command...
Low
Unreviewed
CVE-2007-5626
was published
May 1, 2022
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS)...
Moderate
Unreviewed
CVE-2023-50962
was published
Feb 2, 2024
Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local...
Moderate
Unreviewed
CVE-2023-42144
was published
Jan 23, 2024
Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the...
Moderate
Unreviewed
CVE-2023-46889
was published
Jan 23, 2024
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
Moderate
CVE-2019-10391
was published
for
com.hcl.security:ibm-application-security
(Maven)
May 24, 2022
Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form
Moderate
CVE-2019-10427
was published
for
org.jenkins-ci.plugins:aqua-microscanner
(Maven)
May 24, 2022
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
High
CVE-2019-10428
was published
for
org.jenkins-ci.plugins:aqua-security-scanner
(Maven)
May 24, 2022
Jenkins SCTMExecutor Plugin stores credentials in plain text
Moderate
CVE-2019-16568
was published
for
hudson.plugins.sctmexecutor:SCTMExecutor
(Maven)
May 24, 2022
An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information...
High
Unreviewed
CVE-2023-50614
was published
Jan 19, 2024
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2...
Moderate
Unreviewed
CVE-2007-4786
was published
May 1, 2022
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption...
Moderate
Unreviewed
CVE-2004-1852
was published
Apr 29, 2022
The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits...
Moderate
Unreviewed
CVE-2002-1949
was published
Apr 30, 2022
For MongoDB Ops Manager 4.2.X with multiple OM application servers, that have SSL turned on for...
Moderate
Unreviewed
CVE-2021-20335
was published
May 24, 2022
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of...
High
Unreviewed
CVE-2023-51740
was published
Jan 17, 2024
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of...
High
Unreviewed
CVE-2023-51741
was published
Jan 17, 2024
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user...
Moderate
Unreviewed
CVE-2023-34829
was published
Dec 28, 2023
ProTip!
Advisories are also available from the
GraphQL API